It seems that the ban lurker isn't clearing out the ban list, or does it too slowly.

I've just did a test (on a production server, very low traffic, about 5k objects in cache): - restarted varnish (to empty ban list) - set the ban_lurker_sleep to 0.001s - sent a ban rule, such as: obj.http.x-host == mydomain.com && obj.http.x-url == /index.html - waited for the ban rule to disappear from "varnishadm ban.list" (using "watch")

On 3.0.1, it takes about 4 seconds. On 3.0.2 it takes 168 seconds.

Until the upgrade, setting ban_lurker_sleep to 0.001s was enough to empty the ban list in about 1h. Setting it to 0.000001s after the upgrade only sees the ban list increase (about 100k rules in 24h, even if most of these were in Gone state).